@ai-ecoverse/slicc-bios 1.42.2 → 1.42.4

package/README.md

@@ -181,13 +181,18 @@ The Files panel lists `/opt/grammars/node_modules` but doesn't scan it.
 
 `os/updates.js` is spectrum's `UpdatesPort` (`model.updates`, spectrum ≥ 1.27.0), with one row per component: **Agent** (`/opt/agent`), **Kernel** (`slicc-kernel`), **UI** (`slicc-spectrum`), **BIOS packages** (the other root packages) and **Syntax grammars**. Each row shows its version, when it was last checked, pnpm's download or link count while it installs, and pnpm's output under *Install log*. A component that isn't installed yet is *Waiting* (`queued`, spectrum ≥ 1.29.0) until its install starts. A failed row leads with one sentence on what failed and what to do, and keeps pnpm's output in the log. `ready()` is false at every boot until the agent's model is in place, or until the check finds no agent to start. While it is false, spectrum opens the Install / Update panel, so it shows while the agent installs or loads; while an installed agent starts, its row reads *Starting* (`starting`, spectrum ≥ 1.37.0). It closes once the agent is up without failures, and a new failure opens it again. An installed agent that doesn't start fails its row with **Retry**. Background updates show in the header. Each row's actions go back to the installers: **Retry** runs that installer again, **Restart agent** restarts the agent worker and **Reload** reloads through the BIOS.
 
+#### No agent older than the profile
+
+An agent's session database can migrate one way: from slicc-agent 7.0, pi-durable schema 2, which a 6.x agent can't open. So before `startChat` starts an agent, bios (`os/durable.js`) compares the agent's schema (6.x is 1, 7.x is 2, and a later major counts as able to open any profile, since this seven can't know its schema) with the profile's: the higher of the agent's own marker, `/.slicc/agent-profile.json` `{ durableSchema }`, and bios's record of the highest schema it has started on this origin (`localStorage` `slicc-os.agent-schema`, written before the start, so it covers an agent that never wrote the marker). Only a missing file or `.slicc` folder means no marker; a marker that can't be read or parsed counts as schema 2, the highest this seven knows, so 6.x isn't started and 7.x may be. An older agent isn't started: the Agent row fails and a notice says why, and the newer agent's data stays as it is. No marker and no record start any agent.
+
 #### Developer mode and agent betas
 
 **Developer mode** (`os/beta.js`, #641) lets the owner try a newer slicc-agent from npm before it's certified. It's off by default, and with it off nothing changes: the deployment's lockfiles are the only source. Only the agent (`/opt/agent`) gets betas for now.
 
 - **The switch:** `model.updates.developer()` and `setDeveloper(on)`, rendered in Settings by spectrum. Only the owner tab's own port has them. Other tabs' mirrored ports, remote followers and guests don't, and the owner tab refuses `install-beta` and `back-to-certified` from other tabs. The setting is `slicc-os.developer` in the owner page's `localStorage`, which no kernel process and no agent worker can reach (and the guard keeps the agent's CDP off seven's tabs). No file, URL, hash or environment variable turns it on.
 - **The check:** at every update check with developer mode on, bios reads `https://registry.npmjs.org/@ai-ecoverse/slicc-agent/latest`. When that version is newer than both the certified pin and what's installed, it's offered only if:
-  - it has npm's `dist.integrity` and an SLSA v1 provenance attestation whose subject is this release with that sha512, built from `github.com/ai-ecoverse/slicc-agent` (otherwise the row says *not offered: no provenance*) by its `.github/workflows/release.yml` on `refs/heads/main` or `refs/tags/v<version>` (otherwise *not offered: built outside the release workflow*). bios trusts the attestation npm stores: npm verified its Sigstore signature when the version was published, and bios checks the statement's subject, repository, workflow and ref but not the signature again, so it trusts the registry as much as pnpm already does for the tarball;
+  - it has npm's `dist.integrity` and an SLSA v1 provenance attestation whose subject is this release with that sha512, built from `github.com/ai-ecoverse/slicc-agent` (otherwise the row says *not offered: no provenance*) by its `.github/workflows/release.yml` or `.github/workflows/ci.yml` on `refs/heads/main` or `refs/tags/v<version>` (otherwise *not offered: built outside the release workflow*). bios trusts the attestation npm stores: npm verified its Sigstore signature when the version was published, and bios checks the statement's subject, repository, workflow and ref but not the signature again, so it trusts the registry as much as pnpm already does for the tarball;
+  - it has the same major version as the agent seven ships (a new major, which may migrate the agent's data one way, is *not offered: a new major version*), unless the profile already has that major's schema (or, for a profile beyond what this seven knows, the major is beyond it too), so Developer mode can bring back an agent that will start;
   - its peer ranges and `engines.slicc-kernel` accept seven's kernel and spectrum;
   - `pnpm install --lockfile-only` in `/opt/slicc/beta/agent`, started from the deployment's lock with only the agent's pin changed, resolves the agent with npm's integrity, and every gated package that changes (see [Certified packages](#certified-packages)) is in `certs.json`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-bios",
-  "version": "1.42.2",
+  "version": "1.42.4",
   "description": "Slim loader that boots SLICC into OPFS and serves the UI from there",
   "type": "module",
   "license": "Apache-2.0",
@@ -46,7 +46,7 @@
     "@ai-ecoverse/slicc-browsers": "1.18.7",
     "@ai-ecoverse/slicc-cdp": "1.30.25",
     "@ai-ecoverse/slicc-node": "2.5.1",
-    "@ai-ecoverse/slicc-shared-web": "2.11.2",
+    "@ai-ecoverse/slicc-shared-web": "2.12.0",
     "@ai-ecoverse/slicc-spectrum": "1.104.1",
     "@ai-ecoverse/slicc-vault": "1.16.4",
     "@biomejs/biome": "2.5.15",

package/src/packages/package-lock.json

@@ -11,7 +11,7 @@
         "@ai-ecoverse/slicc-clipboard": "1.1.1",
         "@ai-ecoverse/slicc-kernel": "1.153.0",
         "@ai-ecoverse/slicc-spectrum": "1.104.1",
-        "@ai-ecoverse/wasi-fnox": "1.39.0-6",
+        "@ai-ecoverse/wasi-fnox": "1.40.0-1",
         "@ai-ecoverse/wasi-pnpm": "12.9.1-21",
         "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
         "@ai-ecoverse/wasm-bash": "5.3.0-23",
@@ -31,10 +31,10 @@
         "@ai-ecoverse/wasm-procps": "4.0.7-5",
         "@ai-ecoverse/wasm-sed": "4.10.0-6",
         "@ai-ecoverse/wasm-tar": "1.35.0-9",
-        "@ai-ecoverse/wasm-tls-engine": "4.2.0-8",
+        "@ai-ecoverse/wasm-tls-engine": "4.2.0-12",
         "@ai-ecoverse/wasm-tree": "2.3.2-7",
         "@ai-ecoverse/wasm-which": "2.23.0-5",
-        "@ai-ecoverse/wasm-xz": "5.8.4-6"
+        "@ai-ecoverse/wasm-xz": "5.8.4-8"
       }
     },
     "node_modules/@ai-ecoverse/slicc-browsers": {
@@ -106,9 +106,9 @@
       }
     },
     "node_modules/@ai-ecoverse/wasi-fnox": {
-      "version": "1.39.0-6",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.39.0-6.tgz",
-      "integrity": "sha512-/Rp81mTkzwpe0+soNvLqqXhOJ3xosXo6V5ViKinvEX7/U8JUG7aUUsrQXltBffOX1AN+n1dWr0ukw2/TBFJHXw==",
+      "version": "1.40.0-1",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.40.0-1.tgz",
+      "integrity": "sha512-/1c/ueKiqih0NfgQdQ96Re/LKYQx6vWz31Od7V3YWAgvAxGr9+BBfWhseM/VP7+bUzSPw0ZmD+CqAQ/vJhihog==",
       "license": "MIT",
       "engines": {
         "slicc-kernel": ">=1.83.0"
@@ -244,9 +244,9 @@
       "license": "GPL-3.0-or-later"
     },
     "node_modules/@ai-ecoverse/wasm-tls-engine": {
-      "version": "4.2.0-8",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasm-tls-engine/-/wasm-tls-engine-4.2.0-8.tgz",
-      "integrity": "sha512-YVM03Q4pTJTqjjXLwDN0SCu6M78JJ5BIB9edkWYzKKp8If/QPU10O8P9pGNqMrD+61fj+L4HaFT7jvtvG3jM0w==",
+      "version": "4.2.0-12",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasm-tls-engine/-/wasm-tls-engine-4.2.0-12.tgz",
+      "integrity": "sha512-s/BeMGFK4SmaoG3l2e7eV9H3iXH2GjHxZzMqKhPufE3WfjaTuL8BziZGCcfA/gd7VtqTldMAXErAQWwpvhG2pg==",
       "license": "Apache-2.0 AND MPL-2.0"
     },
     "node_modules/@ai-ecoverse/wasm-tree": {
@@ -262,10 +262,18 @@
       "license": "GPL-3.0-or-later"
     },
     "node_modules/@ai-ecoverse/wasm-xz": {
-      "version": "5.8.4-6",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasm-xz/-/wasm-xz-5.8.4-6.tgz",
-      "integrity": "sha512-8SklBE22t3i29+ZqW/BI2jfEy7xKOF+wxeDDNOtDVfgDiLHPKUwsB0YSkN1sJrzX6C++HZasEhhebQRhevpEng==",
-      "license": "0BSD AND GPL-2.0-or-later"
+      "version": "5.8.4-8",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasm-xz/-/wasm-xz-5.8.4-8.tgz",
+      "integrity": "sha512-AXR23vZMhWmvjFqay8O3v805XoaeFuY9QJBw0g5H1H21iy6YUUtbLutfLuBWg8CLiVg2aDQeqPOoRYr4xd/mLA==",
+      "license": "0BSD AND GPL-2.0-or-later",
+      "peerDependencies": {
+        "@ai-ecoverse/wasm-bash": "*",
+        "@ai-ecoverse/wasm-coreutils": "*",
+        "@ai-ecoverse/wasm-diffutils": "*",
+        "@ai-ecoverse/wasm-grep": "*",
+        "@ai-ecoverse/wasm-less": "*",
+        "@ai-ecoverse/wasm-sed": "*"
+      }
     }
   }
 }

package/src/packages/package.json

@@ -8,7 +8,7 @@
     "@ai-ecoverse/slicc-clipboard": "1.1.1",
     "@ai-ecoverse/slicc-kernel": "1.153.0",
     "@ai-ecoverse/slicc-spectrum": "1.104.1",
-    "@ai-ecoverse/wasi-fnox": "1.39.0-6",
+    "@ai-ecoverse/wasi-fnox": "1.40.0-1",
     "@ai-ecoverse/wasi-pnpm": "12.9.1-21",
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasm-bash": "5.3.0-23",
@@ -28,9 +28,9 @@
     "@ai-ecoverse/wasm-procps": "4.0.7-5",
     "@ai-ecoverse/wasm-sed": "4.10.0-6",
     "@ai-ecoverse/wasm-tar": "1.35.0-9",
-    "@ai-ecoverse/wasm-tls-engine": "4.2.0-8",
+    "@ai-ecoverse/wasm-tls-engine": "4.2.0-12",
     "@ai-ecoverse/wasm-tree": "2.3.2-7",
     "@ai-ecoverse/wasm-which": "2.23.0-5",
-    "@ai-ecoverse/wasm-xz": "5.8.4-6"
+    "@ai-ecoverse/wasm-xz": "5.8.4-8"
   }
 }

package/src/packages/pnpm-lock.yaml

@@ -24,8 +24,8 @@ importers:
         specifier: 1.104.1
         version: 1.104.1
       '@ai-ecoverse/wasi-fnox':
-        specifier: 1.39.0-6
-        version: 1.39.0-6
+        specifier: 1.40.0-1
+        version: 1.40.0-1
       '@ai-ecoverse/wasi-pnpm':
         specifier: 12.9.1-21
         version: 12.9.1-21
@@ -84,8 +84,8 @@ importers:
         specifier: 1.35.0-9
         version: 1.35.0-9
       '@ai-ecoverse/wasm-tls-engine':
-        specifier: 4.2.0-8
-        version: 4.2.0-8
+        specifier: 4.2.0-12
+        version: 4.2.0-12
       '@ai-ecoverse/wasm-tree':
         specifier: 2.3.2-7
         version: 2.3.2-7
@@ -93,8 +93,8 @@ importers:
         specifier: 2.23.0-5
         version: 2.23.0-5
       '@ai-ecoverse/wasm-xz':
-        specifier: 5.8.4-6
-        version: 5.8.4-6
+        specifier: 5.8.4-8
+        version: 5.8.4-8(@ai-ecoverse/wasm-bash@5.3.0-23)(@ai-ecoverse/wasm-coreutils@9.12.0-15)(@ai-ecoverse/wasm-diffutils@3.12.0-4)(@ai-ecoverse/wasm-grep@3.12.0-8)(@ai-ecoverse/wasm-less@668.0.0-7)(@ai-ecoverse/wasm-sed@4.10.0-6)
 
 packages:
 
@@ -128,8 +128,8 @@ packages:
       '@shikijs/themes':
         optional: true
 
-  '@ai-ecoverse/wasi-fnox@1.39.0-6':
-    resolution: {integrity: sha512-/Rp81mTkzwpe0+soNvLqqXhOJ3xosXo6V5ViKinvEX7/U8JUG7aUUsrQXltBffOX1AN+n1dWr0ukw2/TBFJHXw==}
+  '@ai-ecoverse/wasi-fnox@1.40.0-1':
+    resolution: {integrity: sha512-/1c/ueKiqih0NfgQdQ96Re/LKYQx6vWz31Od7V3YWAgvAxGr9+BBfWhseM/VP7+bUzSPw0ZmD+CqAQ/vJhihog==}
     engines: {slicc-kernel: '>=1.83.0'}
 
   '@ai-ecoverse/wasi-pnpm@12.9.1-21':
@@ -194,8 +194,8 @@ packages:
   '@ai-ecoverse/wasm-tar@1.35.0-9':
     resolution: {integrity: sha512-dcGWf9lUS79Z38+TBnK894n1UGBgQkiefuQLHKPmi24I0wBXbzS63g/IyioMZY7Se1afmx1OOrrZkYiT9Fnilg==}
 
-  '@ai-ecoverse/wasm-tls-engine@4.2.0-8':
-    resolution: {integrity: sha512-YVM03Q4pTJTqjjXLwDN0SCu6M78JJ5BIB9edkWYzKKp8If/QPU10O8P9pGNqMrD+61fj+L4HaFT7jvtvG3jM0w==}
+  '@ai-ecoverse/wasm-tls-engine@4.2.0-12':
+    resolution: {integrity: sha512-s/BeMGFK4SmaoG3l2e7eV9H3iXH2GjHxZzMqKhPufE3WfjaTuL8BziZGCcfA/gd7VtqTldMAXErAQWwpvhG2pg==}
 
   '@ai-ecoverse/wasm-tree@2.3.2-7':
     resolution: {integrity: sha512-PUuA1uUboZ3xCfH9ZuQp0ioLe0YzC7WnuiArxwDdDXs7BllmZER/LjxmugSUpx/tbK9+PzNjN8m1YDOFrXPbYg==}
@@ -203,8 +203,15 @@ packages:
   '@ai-ecoverse/wasm-which@2.23.0-5':
     resolution: {integrity: sha512-Lrb8NitymJqzsjW7AVYoe+sOtnwX8GOD0cEsxemd3qQrU3OGz8ViuJ1si3RJbkQPvQ1Bga7pt4VJbMVvFpZn2w==}
 
-  '@ai-ecoverse/wasm-xz@5.8.4-6':
-    resolution: {integrity: sha512-8SklBE22t3i29+ZqW/BI2jfEy7xKOF+wxeDDNOtDVfgDiLHPKUwsB0YSkN1sJrzX6C++HZasEhhebQRhevpEng==}
+  '@ai-ecoverse/wasm-xz@5.8.4-8':
+    resolution: {integrity: sha512-AXR23vZMhWmvjFqay8O3v805XoaeFuY9QJBw0g5H1H21iy6YUUtbLutfLuBWg8CLiVg2aDQeqPOoRYr4xd/mLA==}
+    peerDependencies:
+      '@ai-ecoverse/wasm-bash': '*'
+      '@ai-ecoverse/wasm-coreutils': '*'
+      '@ai-ecoverse/wasm-diffutils': '*'
+      '@ai-ecoverse/wasm-grep': '*'
+      '@ai-ecoverse/wasm-less': '*'
+      '@ai-ecoverse/wasm-sed': '*'
 
 snapshots:
 
@@ -218,7 +225,7 @@ snapshots:
 
   '@ai-ecoverse/slicc-spectrum@1.104.1': {}
 
-  '@ai-ecoverse/wasi-fnox@1.39.0-6': {}
+  '@ai-ecoverse/wasi-fnox@1.40.0-1': {}
 
   '@ai-ecoverse/wasi-pnpm@12.9.1-21': {}
 
@@ -258,10 +265,17 @@ snapshots:
 
   '@ai-ecoverse/wasm-tar@1.35.0-9': {}
 
-  '@ai-ecoverse/wasm-tls-engine@4.2.0-8': {}
+  '@ai-ecoverse/wasm-tls-engine@4.2.0-12': {}
 
   '@ai-ecoverse/wasm-tree@2.3.2-7': {}
 
   '@ai-ecoverse/wasm-which@2.23.0-5': {}
 
-  '@ai-ecoverse/wasm-xz@5.8.4-6': {}
+  '@ai-ecoverse/wasm-xz@5.8.4-8(@ai-ecoverse/wasm-bash@5.3.0-23)(@ai-ecoverse/wasm-coreutils@9.12.0-15)(@ai-ecoverse/wasm-diffutils@3.12.0-4)(@ai-ecoverse/wasm-grep@3.12.0-8)(@ai-ecoverse/wasm-less@668.0.0-7)(@ai-ecoverse/wasm-sed@4.10.0-6)':
+    dependencies:
+      '@ai-ecoverse/wasm-bash': 5.3.0-23
+      '@ai-ecoverse/wasm-coreutils': 9.12.0-15
+      '@ai-ecoverse/wasm-diffutils': 3.12.0-4
+      '@ai-ecoverse/wasm-grep': 3.12.0-8
+      '@ai-ecoverse/wasm-less': 668.0.0-7
+      '@ai-ecoverse/wasm-sed': 4.10.0-6